codex-session-naming
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a documentation and behavioral guide for session naming conventions. It contains no executable code, remote resource fetching, or sensitive system interactions.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection as it requires the agent to read user-supplied task descriptions and session mandates to generate titles. However, the logic is confined to text formatting and emoji assignment, which poses negligible risk to system integrity. 1. Ingestion points: User-supplied session names, mandates, and focus descriptions defined in SKILL.md. 2. Boundary markers: No specific delimiters are required for the ingested task data. 3. Capability inventory: Internal session renaming capabilities as described in the Authority section of SKILL.md. 4. Sanitization: The skill does not provide instructions for sanitizing or escaping the user-provided text before title generation.
Audit Metadata